Privacy policy
Last updated: 20 October 2026
L'Artisan Brossier takes the protection of your personal data very seriously. This policy explains what data we collect when you use lartisanbrossier.com, why, how long we keep it, who we share it with and how to exercise your rights. It complies with Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and the amended French Data Protection Act of 6 January 1978.
1. Data controller
The data controller is VIKIM DIFFUSION, a French SAS registered under number 324 017 748, with its registered office at 15 rue Pierre et Marie Curie, 22190 Plérin, France, which operates the L'Artisan Brossier brand.
For any question about your data: cs@lartisanbrossier.com or by post to the address above.
2. Data we collect
- Identity and contact data: last name, first name, email address, shipping and billing address, phone number.
- Order data: products purchased, amounts, order history, returns, exchanges with our customer service.
- Payment data: entered and processed directly by our secure payment providers. We never have access to your card numbers and do not store them.
- Customer account data: login details, saved addresses, loyalty points and referrals.
- Hair diagnostic answers: hair type and length, styling habits, used solely to recommend a suitable brush.
- Customer reviews: rating, comment and any photos you choose to publish.
- Browsing data: IP address, device and browser type, pages viewed, referring source, interactions with the site, collected through cookies and trackers (see section 8).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Process and deliver your orders, manage payments, returns, warranties and customer service | Performance of the contract |
| Manage your customer account and our loyalty and referral programme | Performance of the contract |
| Send you our newsletters and promotional offers | Your consent (or, for customers, our legitimate interest in presenting products similar to those purchased, which you may object to at any time) |
| Notify you when a product is back in stock, at your request | Your consent |
| Recommend a brush through the hair diagnostic | Your consent |
| Request and publish reviews of our products | Legitimate interest / your consent for publication |
| Measure audience, improve the site and personalise recommendations | Your consent (non-essential cookies) |
| Display targeted advertising on partner platforms (Meta, Google) | Your consent (advertising cookies) |
| Prevent fraud and secure payments and the site | Legitimate interest |
| Comply with our accounting, tax and legal obligations | Legal obligation |
4. Recipients of your data
Your data is intended for authorised VIKIM DIFFUSION staff (customer service, logistics, marketing, accounting). It is also shared, strictly as necessary, with our processors, who act on our instructions:
- Website and store hosting: Shopify International Ltd (Ireland).
- Payment: Shopify Payments / Stripe, PayPal.
- Delivery: La Poste – Colissimo, Mondial Relay, DPD France.
- Emails: Klaviyo.
- Customer reviews: Judge.me.
- Loyalty and referral: Loyoly.
- Hair diagnostic: RevenueHunt.
- Product recommendations and bundles: Rebuy, WideBundle.
- Back-in-stock alerts: Kbite.
- Cookie consent management: Consentmo.
- Audience measurement and advertising: Google (Analytics, Ads), Meta Platforms (Facebook, Instagram), only if you have accepted it.
We never sell or rent your data. It may be disclosed to authorities where required by law.
5. Transfers outside the European Union
Some of our providers (notably Shopify, Klaviyo, Google and Meta) may process data outside the European Union, in particular in Canada and the United States. These transfers are governed by the safeguards provided for by the GDPR: an adequacy decision of the European Commission (Canada; the United States for companies certified under the Data Privacy Framework) or the European Commission's standard contractual clauses.
6. Retention periods
- Customer data: for the duration of the business relationship, then 3 years from your last purchase for marketing purposes.
- Prospects (newsletter without purchase): 3 years from your last contact (open, click, exchange).
- Invoices and accounting records: 10 years (legal obligation).
- Data needed to prove a contract or handle a dispute: 5 years.
- Inactive customer account: deleted after 3 years of inactivity.
- Cookies and trackers: 13 months maximum; your consent choice is kept for 6 months.
7. Your rights
You have the following rights over your data: access, rectification, erasure, restriction of processing, portability, objection (in particular, at any time and without justification, to direct marketing), withdrawal of your consent at any time, and the right to give instructions regarding your data after your death.
To exercise them, write to us at cs@lartisanbrossier.com or by post to VIKIM DIFFUSION – L'Artisan Brossier, 15 rue Pierre et Marie Curie, 22190 Plérin, France. We will reply within one month. If we have reasonable doubts about your identity, we may ask you for proof.
You can unsubscribe from our emails at any time using the link at the bottom of each email. You can also manage your requests directly from the Manage my data page.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr), or with the supervisory authority of your country of residence.
8. Cookies and trackers
When you visit the site, cookies and trackers may be placed on your device:
- Strictly necessary cookies: operation of the cart, checkout and your account, security and storage of your choices. They do not require your consent.
- Audience measurement and personalisation cookies: traffic statistics, site improvement, product recommendations.
- Advertising cookies: measuring the effectiveness of our campaigns and displaying ads tailored to your interests on other websites and social networks.
Non-essential cookies are only placed with your consent, collected through the banner displayed on your first visit. You can accept, refuse or customise your choices, and change them at any time by clicking "Cookie settings" at the bottom of the page. Refusing these cookies does not prevent you from using the site or placing an order.
To learn more about how Google uses data: policies.google.com/technologies/partner-sites.
9. Security
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), secure payment through PCI-DSS certified providers, access to data limited to authorised persons.
10. Minors
The site is intended for adults. Minors may only place orders with the consent of their parents or legal guardians.
11. Changes to this policy
We may update this policy, in particular to reflect legal changes or changes to our services. The date of the last update appears at the top of this page.